How to configure auditd to log only specific record types events

Solution Unverified - Updated -

Issue

How to configure auditd to log only events related to specific audit record types only, like for example the following list

- USER_LOGIN    
- USER_LOGOUT   
- CWD   
- FS_RELABEL 

Environment

Red Hat Enterprise Linux 7

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In